Security

Why are changes not saved when trying to add new capabilities a role?

mrtolu6
Path Finder

I'm having issue adding a capabilities to a role. This role allows users to simply just look at a specific dashboard. I'm trying to add the Change_own_password, list_inputs and rest_properties capabilities to the role, so that users with that role can change there own password. But when I save it, the capabilities get removed. What is causing this? What can I do to fix it?

0 Karma

woodcock
Esteemed Legend

Are you using the GUI? Let's say that you are in app-context foo and you are trying to do this, but your Deployment Server is managing app foo and it's local directory. If you make a change from the GUI, the DS will put it back the way that it was and destroy your changes.

0 Karma

wrangler2x
Motivator

This shows what capabilities can be given to a role that inherits from user, power, and admin. You can add a capability to a role that inherits from user, for example, if the capability in the user column is checked.

About defining roles with capabilities

0 Karma

woodcock
Esteemed Legend

Are you in a search head pool or a search head cluster? Is there a load balancer in front of multiple search heads?

0 Karma

wrangler2x
Motivator

I'm seeing the same problem. The role inherits from user, and when I try to add get_metadata, it disappears when saved. I'm guessing that there are certain things that can't be added to a role that inherits from user.

0 Karma

mrtolu6
Path Finder

I only have one search head, no load balance.

0 Karma

woodcock
Esteemed Legend

How are you testing? If you go back as an admin, is the capability still in the role? If so, is the problem that "it doesn't work"? If so, make sure that you log out and back in for the user with the role because capabilities are established at login.

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...